← All credits

WPScan

4597 vulnerability records and advisories credit this contributor.

CVE-2026-117588

WP Google Review Slider < 18.11 - Google API Settings Update via CSRF

CVE-2026-118528

Directorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDOR

CVE-2026-118529

Directorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing Checkout

CVE-2026-118530

Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk Action

CVE-2026-118532

Directorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image Field

CVE-2026-118533

Directorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment Receipt

CVE-2026-118534

Directorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDOR

CVE-2026-119073

Live Composer < 2.1.23 - Contributor+ Stored XSS via Post Module Pagination

CVE-2026-121379

Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion

CVE-2026-121380

Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API